ZDI-CAN-29413
HIGH 7.5
Upcoming
Mar 30, 2026
Linux
A high-severity vulnerability (CVSS 7.5) has been discovered in Linux that requires local access and high-level privileges to exploit, but can result in complete compromise of system confidentiality, integrity, and availability with cross-system impact. The attack is difficult to execute and requires no user interaction once an attacker has elevated privileges on the target system. Security teams should monitor for patches following the vendor deadline of July 28, 2026, and prioritize systems where high-privileged users may be compromised or untrusted.
Advisory Details
Researcher
GangMin Kim
Reported
March 30, 2026
Deadline
July 28, 2026
103d
CVSS Vector
AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H